$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa File: a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa (raw, json) Hash identifier: JERkfWYm2Jwj9IzUvi3VIkwZzvXzqy6yiTG1mJDDjrY= Subject key identifier: C3:9F:0B:84:D4:66:85:66:3A:D9:33:BA:56:77:DA:94:2C:13:94:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0647B2B3A1F302677AB66800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 23.199.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:b2:b3:a1:f3:02:67:7a:b6:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=0eb0c505-f486-4889-957f-95e233e6e318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:08:58:81:d9:fa:80:90:4d:05:b2:bc:ee: ae:f6:68:12:be:8d:bf:4f:4b:43:6c:f3:7a:41:1c: 67:93:f1:e5:43:2f:b5:12:6d:fa:2f:8e:c4:4d:a9: cf:13:f2:dc:66:08:e6:6f:f2:f2:68:e6:e3:1a:f7: 9d:89:af:b8:e2:b3:fc:94:80:5b:ee:2a:dd:fb:3f: 57:90:34:50:45:c4:b8:59:1b:28:51:5a:cd:d0:b3: 39:d1:65:d6:c5:95:2c:eb:22:c9:95:2c:1a:3e:5e: 27:bf:4f:53:1c:b7:77:c5:32:32:d5:75:e7:f0:e3: 46:8b:19:ea:83:52:bb:c2:6e:79:c3:86:d2:8d:5b: 97:e8:1d:b6:cd:95:aa:94:37:98:46:eb:7b:6c:84: 5a:07:60:1f:ee:5c:e2:e4:b1:00:e2:5f:eb:33:1f: 33:9e:ab:78:c4:ff:da:2f:d6:c8:75:f8:b4:86:57: f7:19:3c:c9:38:96:ca:4e:d7:18:a9:52:01:15:a7: f1:ad:28:57:9c:c1:55:dd:c7:1d:b0:7a:e7:59:d7: 36:87:6b:cc:a3:05:c7:1c:a7:b6:19:3c:5b:81:97: 4a:29:be:2a:60:73:27:28:ff:1b:12:51:c3:d1:63: 67:62:3b:df:3a:36:8a:95:42:33:39:97:56:5a:d5: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9F:0B:84:D4:66:85:66:3A:D9:33:BA:56:77:DA:94:2C:13:94:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:25:3e:52:c8:5d:26:29:1d:f8:da:55:8d:03:19:7e:10:fa: 7e:30:06:a7:3a:e4:6e:f1:97:56:b7:ae:05:56:4c:86:b8:2d: c4:02:9b:2a:8b:2a:47:6c:39:60:c5:2b:e8:d7:be:00:b6:88: 28:7e:9f:a2:03:f3:8e:2c:93:03:80:0e:2d:15:79:f8:4c:a4: 8c:d6:67:35:02:6f:97:04:cc:42:51:d8:85:cd:86:b5:22:ea: 56:29:f5:c8:13:ce:e6:43:2a:41:c2:52:f0:f0:04:a1:44:51: b4:52:c9:88:16:f0:fc:d5:ce:a3:83:15:76:ec:f7:42:2e:2d: d9:ec:de:d1:b7:f0:da:66:a2:36:2b:b8:5c:ac:8b:b2:b2:16: 94:c7:9a:21:f3:67:b3:a1:de:02:f5:67:2c:30:7a:d7:46:78: 7f:08:4c:c4:c5:7c:08:9e:71:2b:2f:02:65:a8:78:be:c0:87: 93:9b:20:dc:08:08:a8:8c:79:14:1f:4c:8a:77:ab:2a:2d:d1: 8c:31:de:dc:3e:2b:4e:69:2b:11:61:69:f4:42:dd:f0:12:ea: a5:5a:30:09:d4:0f:87:5e:64:d5:aa:05:16:1f:df:d0:35:56: a0:22:68:77:36:ae:b7:93:1d:eb:3e:c1:17:77:39:45:24:80: 86:08:4a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR7KzofMCZ3q2aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk MGViMGM1MDUtZjQ4Ni00ODg5LTk1N2YtOTVlMjMzZTZlMzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztgIWIHZ+oCQTQWyvO6u9mgSvo2/T0tDbPN6 QRxnk/HlQy+1Em36L47ETanPE/LcZgjmb/LyaObjGvedia+44rP8lIBb7ird+z9X kDRQRcS4WRsoUVrN0LM50WXWxZUs6yLJlSwaPl4nv09THLd3xTIy1XXn8ONGixnq g1K7wm55w4bSjVuX6B22zZWqlDeYRut7bIRaB2Af7lzi5LEA4l/rMx8znqt4xP/a L9bIdfi0hlf3GTzJOJbKTtcYqVIBFafxrShXnMFV3ccdsHrnWdc2h2vMowXHHKe2 GTxbgZdKKb4qYHMnKP8bElHD0WNnYjvfOjaKlUIzOZdWWtVVdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOfC4TUZoVmOtkzulZ32pQsE5RNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTQwMWI5Y2UtOTFjNi0z NjRkLWJmODUtNTZiMWE1OWRmNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8foMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwlPlLIXSYpHfjaVY0DGX4Q+n4wBqc65G7xl1a3rgVWTIa4LcQCmyqL KkdsOWDFK+jXvgC2iCh+n6ID844skwOADi0VefhMpIzWZzUCb5cEzEJR2IXNhrUi 6lYp9cgTzuZDKkHCUvDwBKFEUbRSyYgW8PzVzqODFXbs90IuLdns3tG38NpmojYr uFysi7KyFpTHmiHzZ7Oh3gL1ZywwetdGeH8ITMTFfAiecSsvAmWoeL7Ah5ObINwI CKiMeRQfTIp3qyot0Ywx3tw+K05pKxFhafRC3fAS6qVaMAnUD4deZNWqBRYf39A1 VqAiaHc2rreTHes+wRd3OUUkgIYISio= -----END CERTIFICATE-----Generated at Sun Mar 1 22:52:15 2026 by rpki-client